
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
eslint-plugin-i18next
Advanced tools
ESLint plugin for i18n
For old versions below v6, plz refer this document
npm install eslint-plugin-i18next --save-dev
For ESLint 9 flat configuration,
// eslint.config.mjs
import i18next from 'eslint-plugin-i18next';
export default [
// your other configs
i18next.configs['flat/recommended'],
];
For ESLint 8 and below,
// .eslintrc
{
"extends": ["plugin:i18next/recommended"]
}
no-literal-string
This rule aims to avoid developers to display literal string directly to users without translating them.
Note: Disable auto-fix because key in the call
i18next.t(key)
usually was not the same as the literal
Example of incorrect code:
/*eslint i18next/no-literal-string: "error"*/
<div>hello world</div>
Example of correct code:
/*eslint i18next/no-literal-string: "error"*/
<div>{i18next.t('HELLO_KEY')}</div>
More options can be found here
By default, it will only validate the plain text in JSX markup instead of all literal strings in previous versions. You can change it easily
FAQs
ESLint plugin for i18n
The npm package eslint-plugin-i18next receives a total of 262,856 weekly downloads. As such, eslint-plugin-i18next popularity was classified as popular.
We found that eslint-plugin-i18next demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.